Cybersecurity A and A Subject Matter Expert

Job Summary

To support Department of Defense (DoD) cybersecurity programs, the full-time fully remote Cybersecurity A&A Subject Matter Expert will lead Risk Management Framework (RMF) activities, manage the Authorization to Operate (ATO) lifecycle, and provide expert guidance on cybersecurity compliance across various environments.

Key Responsibilities

• Serve as the cybersecurity SME for Assessment & Authorization (A&A) and RMF activities
• Lead the development, review, and maintenance of RMF authorization packages, including SSPs and ATO documentation
• Conduct security control assessments and continuous monitoring activities to ensure compliance with NIST SP 800-53 and DoD cybersecurity policies

Required Qualifications

• Minimum five years of relevant experience in A&A, RMF, and NIST cybersecurity compliance within a DoD environment
• Demonstrated experience conducting security control assessments for large, complex organizations
• Strong knowledge of NIST SP 800-53, DoDI 8510.01, and DoD RMF
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field
• DoD 8570/8140 Baseline Certification - IAM Level III (e.g., CISSP, CISM, GSLC, or equivalent)